BREAKING NEWS: Windows Defender Advanced Threat Protection (Windows Defender ATP) to include AI-driven automated investigation and remediation capabilities later this year.Learn more
Alert level: Severe Detected with Windows Defender Antivirus
Also detected as: No associated aliases
Windows Defender detects and removes this threat.
This threat unchecks checkboxes in installation dialogue boxes, effectively messing with choices without your knowledge during installation.
It may be installed together with BrowserModifier:Win32/SupTab and Trojan:Win32/Ghokswa when Trojan:Win32/Xadupi downloads and installs updates. Trojan:Win32/Xadupi, meanwhile is installed by BrowserModifier:Win32/Sasquor, although it may also be installed directly by software bundlers.
This threat is part of a suite of malware and unwanted software families that is also called "Fireball". Read about this threat group in the Windows Security blog: